General
- Target null_prank.bat
- Size 1KB
- Sample260731-qvnamstfrf
- SHA256 12a06e9716655733f7889c1317f4b06b9407a4d1523a9f968eabda7c3fb1c491
- MD5 27ca603cbc5b9bd1a34698744c87bcfe
- SHA1 9a7db7cf12227284a76ab4e783c7a4f5c7cb90a9
- SHA512 b2306230f34c9e363d469768bdcdf94ac9522e707d4ddd1669e362880a3f04654ab00946b64430c61a9822ce58adf86205c447aac9d0a1863c43c255b2f7905d
- TLSH T12721900B6A0D95277CB5C1624FBEC454F936D412F212E81B9297B46CB0037C1EBADAC7
- MD5 SHA1 SHA512 TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
null_prank.bat
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
null_prank.bat
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target null_prank.bat
- Size 1KB
- SHA256 12a06e9716655733f7889c1317f4b06b9407a4d1523a9f968eabda7c3fb1c491
- MD5 27ca603cbc5b9bd1a34698744c87bcfe
- SHA1 9a7db7cf12227284a76ab4e783c7a4f5c7cb90a9
- SHA512 b2306230f34c9e363d469768bdcdf94ac9522e707d4ddd1669e362880a3f04654ab00946b64430c61a9822ce58adf86205c447aac9d0a1863c43c255b2f7905d
- TLSH T12721900B6A0D95277CB5C1624FBEC454F936D412F212E81B9297B46CB0037C1EBADAC7
- MD5 SHA1 SHA512 TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes a VBScript file via the Windows Script Host.